NVD Vulnerability Detail

CVE-2010-4655

Summary	net/core/ethtool.c in the Linux kernel before 2.6.36 does not initialize certain data structures, which allows local users to obtain potentially sensitive information from kernel heap memory by leveraging the CAP_NET_ADMIN capability for an ethtool ioctl call.
Publication Date	July 19, 2011, 4:55 a.m.
Registration Date	Jan. 29, 2021, 11:09 a.m.
Last Update	Nov. 21, 2024, 10:21 a.m.

CVSS3.1 : MEDIUM
スコア	5.5
Vector	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
攻撃元区分(AV)	ローカル
攻撃条件の複雑さ(AC)	低
攻撃に必要な特権レベル(PR)	低
利用者の関与(UI)	不要
影響の想定範囲(S)	変更なし
機密性への影響(C)	高
完全性への影響(I)	なし
可用性への影響(A)	なし

CVSS2.0 : LOW
Score	2.1
Vector	AV:L/AC:L/Au:N/C:P/I:N/A:N
攻撃元区分(AV)	ローカル
攻撃条件の複雑さ(AC)	低
攻撃前の認証要否(Au)	不要
機密性への影響(C)	低
完全性への影響(I)	なし
可用性への影響(A)	なし
Get all privileges.	いいえ
Get user privileges	いいえ
Get other privileges	いいえ
User operation required	いいえ

Affected software configurations

Configuration1		or higher	or less	more than	less than
cpe:2.3:o:linux:linux_kernel::::::::					2.6.36

Configuration2	or higher	or less	more than	less than
cpe:2.3:o:vmware:esx:4.1:::::::*
cpe:2.3:o:vmware:esx:4.0:::::::*

Configuration3		or higher	or less	more than	less than
cpe:2.3:o:canonical:ubuntu_linux:8.04::::-:::

Related information, measures and tools

No	URL	タグ
1	http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b00916b189d13a615ff05c9242201135992fcda3
2	http://openwall.com/lists/oss-security/2011/01/24/9	Mailing List Patch Third Party Advisory
3	http://openwall.com/lists/oss-security/2011/01/25/3	Mailing List Patch Third Party Advisory
4	http://openwall.com/lists/oss-security/2011/01/25/4	Mailing List Patch Third Party Advisory
5	http://openwall.com/lists/oss-security/2011/01/25/5	Mailing List Patch Third Party Advisory
6	http://openwall.com/lists/oss-security/2011/01/28/1	Mailing List Patch Third Party Advisory
7	http://secunia.com/advisories/46397	Broken Link
8	http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36	Broken Link
9	http://www.securityfocus.com/archive/1/520102/100/0/threaded	Third Party Advisory VDB Entry
10	http://www.securityfocus.com/bid/45972	Third Party Advisory VDB Entry
11	http://www.ubuntu.com/usn/USN-1146-1	Third Party Advisory
12	http://www.vmware.com/security/advisories/VMSA-2011-0012.html	Third Party Advisory
13	https://bugzilla.redhat.com/show_bug.cgi?id=672428	Issue Tracking Patch Third Party Advisory
14	https://lkml.org/lkml/2010/10/7/297	Mailing List Patch Third Party Advisory
15	http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b00916b189d13a615ff05c9242201135992fcda3
16	https://lkml.org/lkml/2010/10/7/297	Mailing List Patch Third Party Advisory
17	https://bugzilla.redhat.com/show_bug.cgi?id=672428	Issue Tracking Patch Third Party Advisory
18	http://www.vmware.com/security/advisories/VMSA-2011-0012.html	Third Party Advisory
19	http://www.ubuntu.com/usn/USN-1146-1	Third Party Advisory
20	http://www.securityfocus.com/bid/45972	Third Party Advisory VDB Entry
21	http://www.securityfocus.com/archive/1/520102/100/0/threaded	Third Party Advisory VDB Entry
22	http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36	Broken Link
23	http://secunia.com/advisories/46397	Broken Link
24	http://openwall.com/lists/oss-security/2011/01/28/1	Mailing List Patch Third Party Advisory
25	http://openwall.com/lists/oss-security/2011/01/25/5	Mailing List Patch Third Party Advisory
26	http://openwall.com/lists/oss-security/2011/01/25/4	Mailing List Patch Third Party Advisory
27	http://openwall.com/lists/oss-security/2011/01/25/3	Mailing List Patch Third Party Advisory
28	http://openwall.com/lists/oss-security/2011/01/24/9	Mailing List Patch Third Party Advisory

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-665	不適切な初期化	https://cwe.mitre.org/data/definitions/665.html

JVN Vulnerability Information

Linux kernel の net/core/ethtool.c における重要な情報を取得される脆弱性

Title	Linux kernel の net/core/ethtool.c における重要な情報を取得される脆弱性
Summary	Linux kernel の net/core/ethtool.c は、データ構造を初期化しないため、kernel ヒープメモリから重要な情報を取得される脆弱性が存在します。
Possible impacts	ローカルユーザにより、ethtool ioctl コールの CAP_NET_ADMIN 機能を介して、kernel ヒープメモリから重要な情報を取得される可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	March 1, 2011, midnight
Registration Date	Aug. 17, 2011, 1:30 p.m.
Last Update	Aug. 17, 2011, 1:30 p.m.

Affected System

レッドハット

Red Hat Enterprise Linux 5

Red Hat Enterprise Linux 5 (server)

Red Hat Enterprise Linux Desktop 5.0 (client)

Red Hat Enterprise Linux Desktop 6

Red Hat Enterprise Linux EUS 5.6.z (server)

Red Hat Enterprise Linux HPC Node 6

Red Hat Enterprise Linux Long Life (v. 5.6 server)

Red Hat Enterprise Linux Server 6

Red Hat Enterprise Linux Server EUS 6.0.z

Red Hat Enterprise Linux Workstation 6

サイバートラスト株式会社

Asianux Server 3 (x86)

Asianux Server 3 (x86-64)

Asianux Server 4.0

Asianux Server 4.0 (x86-64)

VMware

VMware ESX 3.0.3

VMware ESX 3.5

VMware ESX 4.0

VMware ESX 4.1

Linux

Linux Kernel 2.6.36 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2010-4655	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4655
National Vulnerability Database (NVD)
2	CVE-2010-4655	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-4655

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-200	https://jvndb.jvn.jp/ja/cwe/CWE-200.html

ベンダー情報

No	Name	URL
Asianux Technical Support Network
1	kernel-2.6.18-194.11.AXS3	https://tsn.miraclelinux.com/tsn_local/index.php?m=errata&a=detail&eid=1420
2	kernel-2.6.18-194.13.AXS3	https://tsn.miraclelinux.com/tsn_local/index.php?m=errata&a=detail&eid=1464
Linux Kernel
3	ChangeLog-2.6.36	http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36
4	ChangeLog-2.6.38	http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.38
5	Linux Kernel Archives	http://www.kernel.org
MIRACLE LINUX アップデート情報
6	2197	https://www.miraclelinux.com/update/index.php?q=node/99&errata_id=2197
Red Hat Security Advisory
7	RHSA-2011:0303	https://rhn.redhat.com/errata/RHSA-2011-0303.html
8	RHSA-2011:0330	https://rhn.redhat.com/errata/RHSA-2011-0330.html
9	RHSA-2011:0421	https://rhn.redhat.com/errata/RHSA-2011-0421.html
VMware Security Advisories
10	VMSA-2011-0012	http://www.vmware.com/jp/support/support-resources/advisories/VMSA-2011-0012.html

その他

No	Name	URL
OPEN SOURCE VULNERABILITY DATABASE (OSVDB)
1	71601	http://osvdb.org/71601
Secunia Advisory
2	SA42035	http://secunia.com/advisories/42035
3	SA43363	http://secunia.com/advisories/43363
4	SA43568	http://secunia.com/advisories/43568
5	SA43732	http://secunia.com/advisories/43732
6	SA44086	http://secunia.com/advisories/44086
SecurityFocus
7	45972	http://www.securityfocus.com/bid/45972

Change Log

No	Changed Details	Date of change
0	[2011年08月17日] 掲載 [2012年12月25日] 影響を受けるシステム：VMware (VMSA-2011-0012) の情報を追加ベンダ情報：VMware (VMSA-2011-0012) を追加	Feb. 17, 2018, 10:37 a.m.